Thanks Steve. That worked. What I don't understand is that it is not in the system that already worked.
Thanks again, David A. Kirkwood >On Thursday 06 December 2007 02:42:30 pm Kirkwood, David A. wrote: >> The ausearch -m DAEMON_START returns version 1.0.14 for auditd on both >> systems. I grepped for loginuid.so in the pam.d directory and it appears >>in >> all of the same pam entries on both systems. No luck yet, however I >> appreciate your help. >Do you have audit=1 as kernel boot option? >-Steve -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
